> Markdown version of [/jobs/ext/3044323-identity-pam-security-engineer](https://www.wearedevelopers.com/jobs/ext/3044323-identity-pam-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & PAM Security Engineer - **Company:** Búsqueda Avanzada - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Cloud Computing Security, Cyber Security, Multi-Factor Authentication, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Key Management, Log Analysis, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Information and Event Management, User Provisioning Software, Workflow Management Systems, Google Cloud, Hashicorp - **Published:** September 24, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. ## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Identity & PAM Security Engineer based in Spain. This role sits at the core of enterprise security, focusing on how identities are governed, accessed, and protected across critical systems and infrastructure. You will design and operate identity security controls that ensure the right people and systems have the right level of access at the right time. Working across Security, Infrastructure, and Engineering teams, you will strengthen privileged access management, enforce least-privilege principles, and improve identity governance at scale. The environment is highly technical and collaborative, with a strong emphasis on automation, resilience, and security-by-design. You will also play a key role in securing cloud and enterprise environments while contributing to continuous improvements in identity workflows and controls. This is a high-impact position where your work directly reduces risk and strengthens the organization's security posture. Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Leveraging Large Language Models for Legacy Code Translation: Challenges and Solutions](https://www.wearedevelopers.com/videos/1157-leveraging-large-language-models-for-legacy-code-translation-challenges-and-solutions) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)